noir
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
api-securitydevsecopspenetration-testing+3
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
thegenetic/cve-2026-2964-labEducational lab demonstrating CVE-2026-2964, a prototype pollution vulnerability in web-audio-recorder-js leading to RCE. Includes vulnerable and…
nihilor/cve-2025-54313Checks projects for compromised packages, suspicious files, and import statements.
blakebratcher/wcw-cyberring-pav-decryptorCryptanalysis of a proprietary 1999 video DRM system. Recovers 61 encrypted wrestling videos from the WCW Internet Powerdisk CD-ROM through static…
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
kai-one001/react-router-cve-2025-61686-Detailed analysis of CVE-2025-61686, a path traversal vulnerability in React Router's file session storage, including root cause, attack scenarios,…
ishaklaz/hash-eye**HashEye** is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats,…
talha-nazeef-ahmed/rpc-triageA zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.
pcmkuit/cve-2021-44228---log4shell-analysisTechnical deep dive into Apache Log4j2 JNDI injection vulnerability. Features static code analysis, patch comparison, attack vectors (LDAP/RMI/DNS),…
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
aniketkarne/aco-prompt-shieldStop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the…
promptfoo/modelauditSecurity scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
protectai/modelscanProtection against Model Serialization Attacks
thebabush/llvm-jutsuAnti-LLM obfuscation via finger counting
wspr-ncsu/mininodeStatic analysis CLI tool that reduces Node.js application attack surface by constructing dependency graphs and removing unused modules and functions…
afine-com/glassworm-hunterDetects GlassWorm supply chain attack payloads by scanning VS Code extensions, npm/PyPI packages, and git repos for invisible Unicode payloads,…
netspooky/inhaleA malware analysis and classification tool.